Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.7DataEase is an open source data visualization and analysis tool.EPSS 0.3%Oct 14, 2026
- Medium5.4lichess.org is the forever free, adless and open source chess server.EPSS 0.2%Oct 14, 2026
- Low3.7cpp-httplib is a C++ header-only HTTP/HTTPS library.EPSS 0.4%Oct 14, 2026
- High7.5cpp-httplib is a C++ header-only HTTP/HTTPS library.EPSS 0.4%Oct 14, 2026
- High7.6Sentry is an application monitoring and error tracking platform.EPSS 0.4%Oct 14, 2026
- Medium5.1DataEase is an open source data visualization and analysis tool.EPSS 0.3%Oct 14, 2026
- Medium5.1DataEase is an open source data visualization and analysis tool.EPSS 0.4%Oct 14, 2026
- Critical9.2Dgraph is an open source distributed GraphQL database.EPSS 0.5%Oct 14, 2026
- Medium5.6Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.EPSS 0.2%Oct 14, 2026
- High8.7In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x decoder uses a canonicalization for well known HTTP headers, the cano…EPSS 0.3%Oct 14, 2026
- Medium6.9In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the vertx-mail-client does not sanitize CR (\r) or LF (\n) characters…EPSS 0.3%Oct 14, 2026
- High8.6In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a scope bypass vulnerability exists in Eclipse Vert.x Web's ChainAuthH…EPSS 0.3%Oct 14, 2026
- Medium6.8BentoPDF is a privacy-focused PDF toolkit that runs in the browser.EPSS 0.2%Oct 14, 2026
- High8.2dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.EPSS 0.3%Oct 14, 2026
- Medium5.3Gogs is an open source self-hosted Git service.EPSS 0.3%Oct 14, 2026
- High7.1Nexent through 2.7.0 Cross-Tenant Knowledge-Base File Read via check_file_accessEPSS 0.2%Oct 14, 2026
- Medium6.0Blinko through 1.8.8 Private Attachment Read via /api/file RouteEPSS 0.2%Oct 14, 2026
- Medium5.3GrowChief through 0.3.0 Missing Authorization via /users/all-users EndpointEPSS 0.2%Oct 14, 2026
- Medium5.3Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization via Transaction Bulk UpdateEPSS 0.3%Oct 14, 2026
- Medium5.3Shopizer through 3.2.5 contains an authorization bypass vulnerability that allows authenticated customers to post reviews as other customers by supplying a customerId field.EPSS 0.2%Oct 14, 2026
- Critical9.2Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-ForceEPSS 0.5%Oct 14, 2026
- High8.3holaOS through 2026.822.1 Missing Authorization in Channel-Gateway ConnectorsEPSS 0.3%Oct 14, 2026
- Medium6.3holaOS through 2026.822.1 Authorization Bypass via Telegram Connector Username AllowlistEPSS 0.2%Oct 14, 2026
- High8.7Gitingest through 0.3.1 Arbitrary File Read via Symlink in Blob IngestionEPSS 0.4%Oct 14, 2026
- Medium5.3Colanode Server through 0.4.7 Path Traversal via Avatar Download RouteEPSS 0.3%Oct 14, 2026